CLSA-2026-1791379849

See a problem?
Import Source
https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.6esu/CLSA-2026-1791379849.json
JSON Data
https://api.osv.dev/v1/vulns/CLSA-2026-1791379849
Upstream
Published
2026-10-07T13:30:57Z
Modified
2026-10-26T09:31:27Z
Summary
cloud-init: Fix of CVE-2024-11584
Details
  • CVE-2024-11584: fix systemd socket unit permission vulnerability to prevent unprivileged user from triggering hotplug-hook commands
  • rebuild with the vendor .el9_6 dist so the update outranks AlmaLinux 24.4-4.el9_6.3.alma.1
References

Affected packages

TuxCare:AlmaLinux:9.6 / cloud-init

Package

Name
cloud-init
Purl
pkg:rpm/tuxcare/cloud-init?distro=almalinux-9.6

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
24.4-4.el9_6.3.alma.1.tuxcare.els2

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.6esu/CLSA-2026-1791379849.json"